auskunftsersuchen-art-15

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests the runtime fact_pattern from test.md (free-form text authored by the test operator/outsider relative to the operating user’s chosen inputs), which the agent will read as LLM context to generate the response.